Technical Information
Modifies file system
Creates the following files
- %TEMP%\mz_etilqs_e0m2nvqdkzmzls8
- %ALLUSERSPROFILE%\a5ke6ibvcsxugqjqu.txt
- %ALLUSERSPROFILE%\akf26ntsod.txt
- %TEMP%\mz_etilqs_h5huwptpg7ggiy5
- %TEMP%\mz_etilqs_rtyk7ddxaig1szb
- %TEMP%\mz_etilqs_6xcvwgnd254tzww
- %TEMP%\mz_etilqs_dkrrabbcjuqxsz3
- %TEMP%\mz_etilqs_1xk6v6gscrtjik0
Network activity
Connects to
- '13#.#25.177.94':80
- '19#.#43.147.236':80
- '14#.#02.225.23':80
- '13#.#9.33.163':80
- '13#.#24.183.235':80
- '15#.#7.17.71':80
TCP
HTTP GET requests
- http://13#.#25.177.94/aKpSaH9DUMZf10Jnv.dat
- http://19#.#43.147.236/aKpSaH9DUMZf10Jnv.dat
- http://13#.#9.33.163/aKpSaH9DUMZf10Jnv.dat
UDP
- DNS ASK fe########alog-cdn.prod.mozaws.net
